i/i 


RD-A135  458  PRESERVING  ASYMMETRY  BV  SYMMETRIC  PROCESSES  AND 

DISTRIBUTED  FAIR' CONFLICT.  .  <U)  TEXAS  UNIV  AT  AUSTIN 
DEPT  OF  COMPUTER  SCIENCES  K  M  CHANDV  ET  AL.  APR  83 
UNCLASSIFIED  AFOSR-TR-83-0990  RFOSR-81-0205  F/G  9/2  NL 


AFOSR-TR-  83-  0990 


*8 

OO 


Preserving  Asymmetry  by  Symmetric  Processes  and 
Distributed  Fair  Conflict  Resolution 


K.  M.  Chanty 
J.  Miar  a 

Department  of  Computer  Sciences 
University  of  Texas  At  Austin 
Austin,  Texns  78712 

April  1983 


DT!C 

ELECTEj 
OEC  7 1983: 


This  work  was  supported  by  the  Air  Force  Office  of  Scientific  Research  under  Grant 
AFOSR4HH06. 


..pproved  x <u  public  release ; 
distribution  unlimited. 


•x&KSsmifm 


83  12  Os  144 


.ncrxr  rrw  n 


\*  *tcuftiTv  o^thi*  base  fWhw*  pi> 

I  REPORT  DOCUMENTATION  PAGE 


AFOSR-TR-  83-  0  990 


a  A  I>e  READ  INSTRUCTIONS 

*UC _ BEFORK  COMPLETING  FORM 

[1.  GOVT  ACCESSION  NO.  *■  RECIPIENT'S  CATALOG  NUMBER 


I*.  TITLE  (anB  SvMHo) 


Preserving  Asymmetry  by  Symmetric  Processes 
and  Distributed  Fair  Conflict  Resolution 


TYPE  OP  REPORT  •  PERIOD  COVERED 


interim 


[S.  PERFORMING  ORG.  REPORT  NUMBER 


IT.  AUTMORTR) 


K.  N.  Chandy  and  J.  Nisra 


a.  CONTRACT  OR  GRANT  NUMBERfaJ 

AFOSR. 81-0205 


a.  PERFORMING  ORGANIZATION  name  ANO  AOOROt  "”~~ 

Computer  Sciences  Department 
The  University  of  Texas  at  Austin 
Austin,  Texas  78712 

•  I.  CONTROLLING  OFFICE  NAME  ANO  ADDRESS 

AFOSR/ NM 

Bolling  AFB.  DC  20332 _ 

14.  MONITORING  AGENCY  NAME  a  AOORCSVM  dIHoront  Item  Controlling  Olll co) 


10.  PROGRAM  ELEMENT.  PROJECT.  TASK 
AREA  *  WORK  UNIT  NUMBERS 

6>//oa.F 

OlSq+/ax _ 

•I.  REPORT  DATE 

ftp*-’*!  S3 _ 

IS.  NUMBER  OF  PAGES 

11  pages 

IS.  SECURITY  CLASS,  (ol  Mo  togott)  ” 


UNCLASSIFIED 


ISa.  OECLASSIFICATION/ DOWNGRADING 
SCHEDULE 


is.  distribution  statement  (oi  into  Rapa h) 

Approved  for  public  release  j 
distribution  unlimited. 


17.  DISTRIBUTION  STATEMENT  (oi  thm  mkrntfct  mtffd  In  5wl  20,  It  rniimmi  from  Hopmt) 


[li.  SUPPLEMENTARY  NOTCS 


1 19.  KIY  WOROS  (CmUmto  oft  rtvtrsf  aid*  I#  noco*—rr  m4  Itomiliy  ftp  klock  numknr) 


20.  ABSTRACT  (CmiIIhm  m  raveree  fide  If  naeaaaary  ond  Identify  ky  Mock  numkot) 

Conflicts  arising  in  distributed  systems,  as  in  contentions  for  shared 
resources,  are  resolved  either  (1)  by  a  central  process  or  (2)  by  resorting 
to  probabilistic  decision  making  by  Individual  processes  or  (3)  by  assigning 
a  static  global  priority  to  each  process.  All  known  non-probablllstic 
solutions  to  the  conflict  resolution  problem  are  asymmetric  in  the  sense 
that  they  distinguish  between  processes  by  ordering  process  Ids  or  by  having 
some  processes  carry  out  special  functions.  We  propose  an  efficient,  fair 


DO  |  JAN*?)  1473  COITION  OF  I  NOV  BB  IS  OBSOLETE 
S/M  0102-LF-0144601 


INC® 


SECURITY  CLASSIFICATION  OF  THIS  PAGE  fWI»o«  Data  Bntorog) 


<I*T«Tj 


^’Qgt  TK.  sa.  i 


IBCUMTV  CLASSIFICATION  or  This  M«l  (Hm  Bata  Batata# 


symmetric  solution  for  this  problem:  asymmetry  Is  present  Initially  by 
judicious  placement  of  shared  resources  and  asymmetry  Is  preserved  In  a 
fair  manner  by  our  solution.  To  provldea  concrete  framework  for  our 
discussion  of  conflict  resolution  we  couch  our  discussion  In  terms  of  a 
generalization  of  the  classical  dining  philosophers'  problem. 


•CCuniTV  CLASSIFICATION  OP  This  PAOKfMaa  Bata  Batata# 

*t  •  »«*■  u  Htt  a  ml  ^>w,.  .. 


4 


'y  Abstract 

Conflict*  trains  in  distributed  systems,  u  in  contention*  for  shared  resources,  are 
resolved  either  fft  by  a  central  process  or  (ft  by  resorting  to  probabilistic  decision  making 
by  individual  processes  or  (£)  by  assigning  a  static  global  priority  to  each  process.  All 
known  aon-probabilatic  solutions  to  the  conflict  resolution  problem  are  asymmetric  in  the 
sense  that  they  distinguish  between  processes  by  ordering  process  ids  or  by  having  some 
processes  carry  out  special  functions.  We  propose  an  efficient,  fair,  symmetric  solution 
for  this  problem:  asymmetry  is  present  initially  by  judicious  placement  of  shared 
resources  and  asymmetry  is  preserved  in  a  fair  manner  by  our  solution.  To  provide  a 
concrete  framework  for  our  discussion  of  conflict  resolution  we  couch  our  discussion  in 
terms  of  a  generalisation  of  the  classical  dining  philosophers’  problem. 
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Asymmetry  in  Message  Passing  Systems 

Conflicts  arise  in  distributed  systems  because  two  or  more  processes  cannot  take 
arbitrary  actions  simultaneously.  For  instance,  some  resources,  such  as  'write  locks,* 
cannot  be  exercised  simultaneously  by  2  or  more  processes.  Exclusive  access  to  a  shared 
resource  introduces  'asymmetry*  among  processes  who  wish  to  share  the  resource  in  the 
sense  that  at  any  given  point  in  the  computation,  the  process  holding  the  resource  may 
behave  differently  from  those  which  don’t.  Usually,  it  is  desired  that  though  some 
processes  are  treated  preferentially  in  the  short  term,  all  processes  are  treated  fairly  in  the 
long  term:  this  desideratum  may  be  thought  of  as  'short-term  asymmetry  and  long-term 
symmetry."  Lehmann  and  Rabin  [l]  have  proved  that  it  is  impossible  for  an  ensemble  of 
perfectly  symmetric  processes  in  a  symmetric  global  state  to  create  asymmetry  without 
resorting  to  probabilistic  decision  making.  We  argue  that  processes  in  a  message-passing 
network  can  never  be  in  identical  states,  with  respect  to  resources  because  the  locations 
of  the  indivisible  resources  (either  at  a  process,  or  traveling  towards  a  process)  introduce 
asymmetry.  We  exploit  this  resource  location  asymmetry  to  resolve  conflicts  for 
resources  and  ensure  long-term  symmetry  despite  inherent  short-term  asymmetry.  To 
provide  a  concrete  framework,  we  couch  our  discussion  in  terms  of  the  distributed 
drinking  philosophers’  problem,  described  next;  we  propose  an  efficient  fair  solution  to 
this  problem.  Our  solution  makes  use  of  a  novel  solution  to  the  distributed  dining 
philosophers'  problem,  which  was  first  defined  in  (2). 

The  Distributed  Drinking  Philosophers’  Problem 


The  following  problem  is  a  variant  of  one  due  to  E.  W.  Dijkstra  |2].  Dijkstra’s 
original  problem  (4)  has  achieved  the  status  of  legend  since  it  captures  the  essence  of 
many  synchronisation  problems.  A  far-flung  network  of  philosophers  is  represented  by  a 
finite  undirected  graph  G  with  one  philosopher  at  each  vertex.  A  philosopher  is  in  one  of 
3  states:  (1)  tranquil  (2)  thirsty  (i.e.,  waiting  to  drink)  or  (3)  drinking.  Associated  with 
each  edge  {vj.Vj}  in  G  is  a  bottle.1  A  philosopher  can  drink  only  from  bottles  associated 
with  his  incident  edges.  Each  philosopher  chooses  a  subset  of  bottles  that  he  wishes  to 
drink  from,  when  he  becomes  thirsty.  He  mag  choose  different  subsets  of  bottles  for 
different  drinking  sessions.  A  philosopher  is  thirsty  if  he  desires  to  proceed  to  drinking 
state  but  is  unable  to  do  so  because  he  does  not  have  all  the  bottles  he  needs.  On 
receiving  all  needed  bottles  a  thirsty  philosopher  starts  drinking;  a  thirsty  philosopher 
remains  thirsty  until  he  gets  all  bottles  he  needs  to  drink.  On  entering  the  drinking  state, 
a  philosopher  remains  in  that  state  for  a  finite  period,  after  which  he  becomes  tranquil.  A 


philosopher  may  be  in  the  tranquil  state  for  an  arbitrary  period  of  time. 

Philosophers  v,  and  Vj  are  neighbors  if  and  only  if  edge  {v,,vj}  exists  in 
G.  Neighbors  may  mail  packages  to  one  another.  Philosopher  v{  has  a  mailbox  which  can 
hold  an  arbitrary  number  of  packages;  we  show  later  that  only  a  bounded  number  of 
packages  will  ever  be  ia  any  mailbox.  The  postal  service  guaraatees  that  it  will  deliver  all 
mailed  packages  ia  finite  time  without  mutilating  the  contents.  A  package  is  delivered  to 
(the  address  of)  a  philosopher  v,  if  and  only  if  the  package  was  mailed  to  v,  by  another 
phlloaopher;  the  postal  service  does  not  duplicate  or  create  packages.  The  bottle 
associated  with  aa  edge  {vj,Vj}  is  either  at  v,  or  at  Vj  or  in  the  mail  from  v,  to  v^  or  from 


’The  (station  gtven  ia  this  pepor  die  septic*  to  multiple  bottle*  os  cvciy  dp.  Tbe  cscumptioi  of  os* 
bottle  per  dp  is  mode  for  simplicity  ia  oxporitioa. 
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The  problem  to  to  devise  s  Boo-probabilistic  solution  which  satisfies  the  following 
constraints. 

/•fmMi:  No  philosopher  remains  thirsty  forever. 

symmetry:  All  philosophers  obey  precisely  the  same  rules  for  acquiring  and 

releasing  bottles.  There  is  no  priority  or  any  other  form  of  externally 
specified  static  partial  ordering  among  philosophers  or  bottles. 


eeo nerntr  A  philosopher  sends  and  receives  a  finite  number  of  packages  is  every 

state  (tranquil,  thirsty,  drinking).  In  particular,  permanently  tranquil 
philosophers  do  not  send  or  receive  an  infinite  number  of  packages. 

comsittwey.  The  solution  does  not  deny  the  possibility  of  simultaneous  drinking 
from  different  bottles  by  any  two  philosophers. 

Importance  of  the  Distributed  Drinking  Philosophers*  Problem 

The  distributed  drinking  philosophers'  problem  to  a  general  paradigm  for  modelling 
conflicts  between  processes.  This  paradigm  has  the  following  features:  (1)  two 
neighboring  philosophers  may  be  prevented  from  simultaneously  drinking  in  some  cases, 
i.e.  drinking  from  the  same  bottle,  which  corresponds  for  instance,  to  writing  into  shared 
a  file,  (S)  two  neighboring  philosophers  may  drink  simultaneously  in  some  cases,  i.e. 
drinking  from  different  bottles,  which  corresponds  for  instance,  to  writing  into  different 
files  or  reading  from  the  same  fils. 


Therefore  the  drinking  philosophers’  problem  models  dynamic  conflicts,  i.e., 
conflicts  that  may  be  determined  by  the  data  on  which  a  process  operates.  A 
conservative  solution  to  this  problem  may  always  avoid  conflicts  among  all  neighbors; 
this  hdwever  leads  to  loss  in  concurrency. 


The  paradigm  can  also  model  N-way  conflicts  arising,  as  in  distributed  resource 
allocation  problem,  where  there  are  nri;  indivisible  units  of  resource  rj  to  be  shared  among 
N  processes.  A  process  wishing  to  enter  its  critical  section  specifies  the  set  of  resources  it 
needs.  Thus  there  is  as  N-way  conflict  for  a  resource.  N-way  conflicts  may  be  modelled 
as  a  set  of  N*  2-way  conflicts:  two  processes  are  neighbors  if  it  to  possible  that  they  may 
conflict. 

Prarioun  Work 

If  a  philosopher  requires  all  bottles  from  its  incident  edges  for  all  drinking  sessions, 
then  our  problem  reduces  to  Dijkstra's  distributed  dining  philosophers’  problem  (2);  in  this 
x  problem,  there  to  a  single  'fork*  on  each  edge  and  a  philosopher  'eats*  (corresponding  to 
drinking)  only  if  he  holds  forks  for  all  incident  edges.  Therefore  the  drinking 
philosophers'  problem  to  a  generalisation  of  the  distributed  dining  philosophers'  problem. 
The  distributed  dining  philosophers’  problem  to  a  generalisation  of  Dijkstra’s  classical 
dining  philosophers’  problem  |4);  in  the  latter  problem  the  philosophers  sit  around  a  table 
(U.  they  are  arranged  in  the  form  of  a  ring).  The  wealth  of  literature  on  the  classical 
dining  philosophers'  problem  shows  that  it  to  a  fundamental  paradigm  of  concurrent 
processing.  Dijkstra’s  solutions  to  the  distributed  dining  philosophers'  problem  |2|  assume 
instantaneous  transmission  of  packages  or  a  static  ordering  of  forks  (which  to 
asymmetric).  Lynch  (3)  has  carried  out  an  extensive  analysis  of  static  resource  orderiag 


■>.v- 


algorithms. 


The  problem  of  mutual  exclusion  among  a  group  of  processes  in  executing  their 
critical  sections,  is  a  special  case  of  the  distributed  dining  philosophers’  problem  :  every 
process  is  a  neighbor  of  every  other  process  and  execution  of  a  critical  section  corresponds 
to  eating.  Distributed  solutions  to  mutual  exclusion  using  process  id’s  to  break  ties, 
appear  in  Lamport  (6],  Ricart  and  Agrawala  [6|. 

A  symmetric  distributed  solution  to  the  dining  philosophers’  problem  appears  in 
Frances  and  Rodeh  |7).  They  use  an  extended  form  of  CSP  (8],  in  which  both  input  and 
output  commands  are  used  in  guards.  Lehmaaa  and  Rabin  |l)  give  a  perfectly  symmetric 
probabilistic  algorithm  and  show  that  there  is  no  perfectly  symmetric  non-probabilistic 
solution  to  the  dining  philosophers’  problem.  Therefore  it  follows  that  the  extended  form 
of  CSP  cannot  be  implemented  by  a  symmetric  protocol. 

We  first  present  a  solution  to  the  distributed  dining  philosophers’  problem  and  then 
use  this  solution  in  solving  the  distributed  drinking  philosophers’  problem. 

A  Hygienic  Solution  to  the  Distributed 
Dining  Philosopher*’  Problem 

In  the  distributed  dining  philosophers'  problem,  a  philosopher  is  either  thinking, 
hungry  or  eating.  Associated  with  each  edge  of  the  graph  is  a  fork  and  a  hungry 
philosopher  needs  forks  of  all  incident  edges,  to  eat.  We  begin  by  presenting  a  solution  to 
the  distributed  dining  philosophers’  problem  with  the  properties  of  fairness,  symmetry, 
economy  and  concurrency.  We  consider  the  more  general,  drinking  philoeophers'  problem 
in  the  next  section. 

A  fork  is  either  dean  or  dirty.  A  fork  that  is  being  used  to  eat  with,  is  dirty  and 
remains  dirty  until  it  is  cleaned.  A  philosopher  can  only  clean  forks  that  he  holds.  A 
clean  fork  remains  dean  until  it  is  used  for  eating.  A  fork  is  said  to  be  free  it  the 
philosopher  holding  it  is  either  thinking  or  hungry  ,  i.e.  not  eating.  A.philoeopher  cleans  a 
fork  prior  to  matting  it  (because  he  is  hygienic).  The  key  issue  in  the  dining  philosophers’ 
problem  is:  which  requests  should  a  philosopher  defer  till  he  has  next  eatenf  In  our 
algorithm,  a  philosopher  defers  satisfying  requests  for  forks  that  are  clean  (because  his 
altruism  is  limited)  or  not  free  (because  he  is  eating  with  it).  A  philosopher  satisifies 
requests  for  free,  dirty  forks  immediately. 

We  now  state  the  algorithm  in  detail,  for  a  philosopher  v{.  In  this  description 
■satisfy  a  request*  means  dean  and  send  the  requested  fork  and  'forks  v,  needs*  denotes 
the  set  of  forks  sasoeiated  with  the  edges  incident  on  v(. 

Thinking  Statu  (all  forks  held  by  v,  are  free  and  dirty.) 

Satisfy  all  requests  received. 

Hmgry  Statu  (all  forks  hdd  by  v,  are  free;  forks  received  in  the  matt  by  v,  since  last 
catering  hungry  state  are  :leaa;  all  the  remaining  forks  held  by  v,  are 
dirty.) 

Request  every  fork  that  v{  needs  and  does  not  hold.  (Therefore,  v, 
mast  request  a  fork  that  is  released  in  this  state.)  Eater  eating  state 
when  v{  holds  all  forks  it  needs.  Satisfy  requests  in  the  hungry  state  if 
they  are  for  dirty  forks,  dm  defer  request. 


B»tllH  State  {forks  for  si)  incident  edges  are  held  by  v{;  none  of  these  forks  is  free.} 
Defer  ail  requests  received  in  this  state.  Eat.  Upon  completion  of 
eating  {all  forks  are  dirty  and  free)  satisfy  all  deferred  requests  and  all 
requests  in  the  mailbox. 

The  proof  of  correctness  of  the  algorithm  and  the  specification  of  initial  conditions 
require  the  definition  of  a  directed  graph  H;  this  definition  and  the  initial  condition  are 
given  next.  Observe  that  our  solution  satisfies  the  constraints  of  fairness,  symmetry, 
economy  and  concurrency. 

The  Graph  H 

We  shall  derive  a  directed  graph  H  from  G  and  the  states  of  forks,  as  follows: 
direct  each  edge  {Vj,Vj}  in  G  from  Vj  to  rj  if  and  only  if  the  fork  associated  with  the  edge 
is:  (1)  at  V|  and  dirty  or  (2)  in  transit  from  v(  to  Vj  or  (3)  at  Vj  and  clean. 

Initial  Condition 

All  forks  are  dirty  and  H  is  acyclic. 

Proof  of  Correctness 

We  first  show  that  H  is  always  acyclic.  The  only  change  to  H  occurs  when  a 
philosopher  dirties  a  clean  fork  (since  cleaning  a  dirty  fork  and  sending  it  does  not  change 
the  direction  of  the  edge).  A  fork  is  dirtied  only  when  a  philosopher,  say  v{  eats,  in  which 
case  he  must  be  bolding  all  forks  which  must  all  be  dirty.  Therefore  v{  cannot  belong  to  a 
cycle  on  eating,  because  all  edges  incident  on  v-  are  directed  away  from  it  (since  all  forks 
held  by  V|  are  dirty).  It  is  given  that  H  is  acyclic  initially.  Since  all  changes  to  H 
preserve  acyclicity,  H  must  always  be  acyclic. 

We  show  that  if  (v.,v.)  is  an  edge  in  H  and  Vj  is  hungry,  then  v^  either  holds  now  or 
will  hold  later,  the  clean  fork  associated  with  this  edge.  Since  (vj,Vj)  is  an  edge  in  H,  then 
either  (1)  Vj  holds  a  clean  fork,  (2)  a  clean  fork  is  in  the  mail  from  v-  to  Vj  or  (3)  v.  is 
holding  a  dirty  fork.  The  result  is  trivial  for  the  first  two  cases.  In  the  third  case  v{  will 
receive  a  request  from  Vj  in  finite  time.  Vj  must  mail  Vj  the  fork  after  cleaning  it,  when 
the  fork  is  dirty  and  free;  the  fork  remains  dirty  until  v(  cleans  it  and  mails  it  to  Vj. 
Therefore  v,  must  mail  the  fork  to  Vj  when  it  becomes  free.  The  fork  is  free  unless  v{  » 
eating.  Since  an  eating  session  lasts  for  finite  time,  the  fork  must  become  free  in  finite 
time.  Therefore  Vj  will  hold  the  clean  fork  in  finite  time. 

We  show  in  theorem  3  that  every  hungry  philosopher  will  (bold  all  forks  it  needs 
and)  eat  in  finite  time.  We  have  observed  that  for  each  incoming  edge  (v.,vj)  to  Vj,  if  Vj  is 
hungry,  then  Vj  will  hold  the  clean  fork  associated  with  this  edge.  Now  we  must  show 
that  for  every  outgoing  edge  (vj,vk)  of  Vj,  either  (1)  Vj  bolds  the  dirty  fork  for  this  edge 
and  receives  no  requests  from  vk  or  (ii)  vk  eats  and  then  sends  Vj  the  clean  fork  associated 
with  this  edge.  In  either  case  Vj  will  hold  the  fork  for  this  edge  and  continue  to  hold  it  at 
least  util  it  next  eats.  The  result  is  proved  by  induction  in  theorem  3  (below). 

Lemma  li  H  is  always  acyclic. 

Proof!  See  above  discussion. 

Lemma  Si  If  Vj  is  hungry  and  has  an  incoming  edge  (Vj.Vj)  in  H  then  Vj 

holds,  or  will  hold  the  clean  fork  for  this  edge  in  finite  time. 

Proof!  See  above  discussion. 
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Thtonm  St  A  hungry  philosopher  will  eat  in  finite  time. 

Proof!  Let  H*  be  the  graph  H  at  the  point  in  computation  when  the 
given  philosopher  is  hungry.  (H*  is  a  specific,  static  graph  referring  to  a 
particular  point  in  the  computation  whereas  H  is  a  dynamic  graph  which 
changes  with  transmission  of  forks.)  We  shall  show  that  all  philosophers  who 
are  hungry  at  this  point  in  the  computation  will  eat  in  finite  time. 

We  define  the  height  of  a  vertex  as  follows:  the  height  of  a  vertex  with 
no  outgoing  edges  in  H*  is  0;  the  height  of  a  vertex  with  outgoing  edges  is  the 
length  of  the  longest  path  from  it  to  a  vertex  of  height  0,  where  length  is 
defined  as  the  number  of  edges  along  the  path. 

We  show  by  induction  on  k  that  a  hungry  philosopher  at  height  k  will 
eat  in  finite  time.  This  is  certainly  true  of  hungry  philosophers  at  height  0 
since  they  have  only  incoming  edges  and  lemma  2  applies  for  each  incident 
edge.  Now  assume  that  the  claim  is  true  for  philosophers  at  heights  0,l,..,k-l. 
Consider  a  hungry  philosopher  Vj  at  height  k  (k— 1,2,..)  and  a  neighboring 
philosopher  v{.  If  (vj,Vj)  is  an  edge  then  Vj  holds  or  will  hold  the  clean  fork  for 
this  edge,  from  lemma  2.  If  (vj.v.)  is  an  edge,  either  v-  holds  the  (dirty)  fork 
for  this  edge  or  Vj  is  hungry  (since  all  edges  incident  on  thinkers  and  eaters  are 
directed  away  from  them).  If  v{  is  hungry  then  he  eats  in  finite  time, 
according  to  the  induction  hypothesis.  Since  Vj  must  stop  eating  in  finite  time, 
the  forks  for  all  edges  incident  on  v.  become  dirty  and  free  in  finite  time. 
Therefore  v-  will  receive  (a  clean)  fork  from  Vj  in  finite  time.  No  clean  fork 
that  Vj  holds  will  be  released  until  Vj  eats.  Hence  Vj  holds  all  forks  in  finite 
time  and  eats. 

Efficiency  of  the  Algorithm 

A  thinking  philosopher  who  has  M  neighbors  and  F  (dirty)  forks,  on  becoming 
hungry,  must  send  M-F  requests  and  receive  a  fork  corresponding  to  each  request;  in 
addition,  in  the  worst  case  he  may  tone  all  F  forks  he  held  initially  and  therefore  have  to 
request  and  receive  them.  In  the  latter  case,  the  philosopher  may  send  the  fork  and  the 
request  for  it  in  one  message.  Therefore  no  more  than  2M  messages  are  needed  for 
entering  one  eating  state.  In  the  best  case,  a  philosopher  may  receive  no  requests  for 
forks  and  therefore  he  may  live  his  life  (think  and  eat)  free  of  interaction  with  others. 

A  Solution  to  the  Distributed  Drinking 
Philosophers’  Problem 

The  drinking  philosophers'  problem  is  a  significant  generalisation  of  the  distributed 
dining  philosophers’  problem.  We  seek  a  distributed  non-probabilistic  solution  satisfying 
the  same  conditions  •  faimett,  symmetry,  economy,  concurrency  •  as  for  the  distributed 
dining  philosophers'  problem.  Every  solution  to  the  drinking  problem  is  a  solution  to  the 
dining  problem,  though  the  converse  is  not  true.  In  particular,  our  solution  to  the 
distributed  dining  philosophers’  problem  doss  not  solve  the  drinking  philosophers’ 
problem.  For  example,  suppoee  two  or  more  philosophers  are  arranged  in  a  ring  each 
with  two  incident  edges,  left  and  right ,  and  all  of  them  are  now  drinking  with  their  left 
bottles.  If  they  nil  require  both  bottles  for  their  next  drinking  session,  then  our  dining 
philosophers'  solution  results  in  a  deadlock.  The  reason  for  deadlock  is  that  the 
deadlocked  stats  is  egmmetrie,  because  the  philosophers  are  arranged  in  a  ring  and  each 
holds  his  left  bottle.  The  system  can  leave  a  symmetric  state  only  by  resorting  to 
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probabilistic  decision  making.  Since  we  seek  non-probabilistic  algorithms,  we  must 
prevent  the  system  from  entering  symmetric  states.  However,  it  is  certainly,  feasible  for 
all  philosophers  sitting  in  a  ring  to  hold  their  left  bottles.  If  we  were  to  disallow  this  state 
we  won  Id  be  disallowing  a  feasible  state  merely  to  solve  our  problem;  disallowing  feasible 
states  violates  oar  constraint  of  concurrency.  We  appear  to  be  in  a  quandary  because  the 
constraints  of  symmetric  processes,  non-probabilistic  solutions  and  concurrency  are 
incompatible.  We  resolve  this  quandary  by  introducing  artificial  indivisible  resources  and 
ensuring  that  every  etate  that  the  tyetem  enters  is  asymmetric  with  respect  to  the 
artificial  resources  though  the  state  may  be  symmetric  with  respect  to  the  genuine 
resources  (vis.  bottles).  We  shall  ensure  that  the  sharing  of  artificial  resources  is  such 
that  long-term  symmetry  with  respect  to  the  artificial  resources  (and  genuine  resources  as 
well)  is  achieved  despite  inherent  short-term  asymmetry. 

The  artificial  resource  we  introduce  are  forks  in  the  distributed  dining  philosophers’ 
problem.  We  have  a  solution  to  the  dining  philosophers'  problem  which  ensures  that  forks 
are  shared  in  a  fair  manner.  We  shall  use  the  locations  of  forks  to  resolve  conflicts  for 
bottles.  Our  philosopher  can  eat  and  drink  simultaneously  and  we  emphasise  that  eating 
is  an  artifact  of  our  solution,  used  only  to  guarantee  fair  drinking.  In  our  solution,  the 
state  of  a  philosopher  is  a  pair  (dining  philosopher's  state,  drinking  philosopher’s  state), 
where  a  dining  philosopher's  state  is  one  of  thinking,  hungry  and  eating  and  a  drinking 
philosopher’s  state  is  one  of  tranquil,  thirsty  and  drinking.  Our  next  step  is  to  define  the 
dining  characteristics  of  our  philosophers:  the  drinking  characteristics  are  specified  by  the 
problem.  We  shall  give  rules  for  dining  which  ensure  that  all  thirsty  philosophers  drink  in 
finite  time. 

Consider  the  state  transitions  of  a  dining  philosopher.  The  only  transitions  that  are 
decided  by  the  philosopher  are  thinking-to-hungry  and  eating-to-thinking;  the  only 
transition  completely  specified  by  the  dining  philosophers’  problem  in  hungry-to-eating 
(which  occurs  when  the  philosopher  holds  all  forks  he  needs).  We  will  now  give  rules  for 
the  dining  philosopher  to  decide  the  point  of  the  first  two  transitions. 

D1  ( Thinking-to-Hungry  Transition ) 

A  thinking  philosopher  becomes  hungry  on  becoming  thirsty.  A 
philosopher  cannot  stop  thinking  until  he  becomes  thirsty. 

DS  (Eating-to-Thinking  Transition) 

An  eating  noa-thhvty  philosopher  starts  thinking.  A  philosopher 
cannot  stop  eating  as  long  as  he  is  thirsty. 

This  solution  requires  a  philosopher  to  check  his  mailbox  while  eating  because  a 
thirsty,  eating  philosopher  will  never  get  to  drink  (and  thus  terminate  eating)  unless  he 
checks  his  mail  and  get  the  bottles  he  desires.  In  the  distributed  dining  philosophers’ 
problem,  a  philosopher  can  think  for  arbitrary  time  though  he  must  eat  for  finite  time. 
Therefore  our  obligation,  arising  out  of  rules  (Dl)  and  (D2),  is  to  ensure  that  each  eating 
period  is  finite.  This  can  be  accomplished  (see  lemma  4)  by  (D3)  given  below.  Note  that 
a  philosopher  cannot  give  up  a  bottle  from  which  he  is  currently  drinking;  thus  analogous 
to  free  forks,  we  define  a  bottle  to  be  free  if  the  phiteeophet  holding  it  is  not  drinking 
from  it. 

DS  (Rule  of  Bottle  Transmission) 

Philoeopker  v,  sends  a  bottle  he  holds  to  Vj  in  response  to  a  request 


from  Yj,  if  aad  only  if  the  bottle  is  free  and  (v,  does  not  need  the  bottle 
or  Vj  does  not  hold  the  fork  for  the  edge  {v.,Vj}). 

These  rales  lead  to  the  following  algorithm  for  philosopher  v(. 

Algorithm  for  y( 

(DO)  If  thirsty ::  Send  requests  for  all  needed  bottles  that  v{  does  not  hold,  (and  for 
which  requests  have  not  already  been  sent  since  last  becoming  thirsty). 

(Dl)  If  thirsty  mad  thinking  :: 

Become  hungry.  (Take  action  appropriate  to  a  dining  philosopher  when 
he  becomes  hungry.) 

(DO)  If  not  thirttg  and  eating  :: 

Stop  eatiag  aad  transit  to  thiakiag  state. 

(DO)  If  there  is  s  request  from  a  philosopher  Vy  for  a  bottle  and  the  bottle  is  free  and 
(the  bottle  is  not  needed  bg  »,•  or  »,■  does  not  hold  the  fork  for  the  edge 
{***#»: 

Send  bottle  to  Vj. 

(D4)  If  thirsty  and  holding  all  needed  bottles:: 

Drink.  Oa  completion  of  driakiag  become  traaquii.  (At  this  point  all 
bottles  held  by  Vj  are  free  aad  from  rule  D3  all  pending  requests  for 
bottles  will  now  be  satisfied.} 

Nolo:  v,  must  also  obey  the  algorithm  for  a  dining  philosopher.  Initial  locations  of 
bottles  are  irrelevant. 

Proof  of  Correctness 

We  will  now  show  that  every  thirsty  philosopher  drinks  in  finite  time.  We  wiU  use 
theorem  3  from  the  last  section  to  show  that  every  hungry  philosopher  wiD  eat  in  finite 
time;  however  in  order  to  do  so  we  must  prove  that  every  eating  period  is  finite.  This  is 
next  proved  in  lemma  4. 

Lemma  4s  Every  eatiag  period  is  finite. 

Proof!  If  Vj  is  eating  aad  not  thirsty,  he  completes  eating.  Assume 
therefore  that  v{  is  eatiag  aad  thirsty.  We  wiU  show  that  v{  will  receive  every 
bottle  he  needs. 

A  neighbor  Vj  of  v(  will  send  the  bottle  needed  by  v{  (if  Vj  holds  it)  In 
finite  time  (using  D3)  because  drinking  periods  are  finite  aad  Vj  does  not  hold 
the  fork  for  {vj.Vj}. 

Vj  will  not  relearn  any  bottle  that  he  needs,  because  be  holds  aU  forks. 
Therefore  v(  win  drink  in  finite  time  aad  become  not  thirsty,  thus  terminating 
eating. 

Siace  every  eating  period  is  finite,  theorem  3  applies  aad  we  have, 

Corollary  St  Every  hungry  philosopher  starts  eatiag  in  finite  time. 

Corollary  fit  A  thirsty,  eatiag  philosopher  must  drink  in  finite  time. 

Proof!  Eating  periods  are  finite  aad  are  terminated  only  by  driakiag. 


Theorem  7i  Every  thirsty  philosopher  drinks  in  finite  time. 

Proof!  When  t  philosopher  becomes  thirsty  he  is  either  thinking,  hungry 
or  enting.  A  (thirsty .thinking)  philosopher  becomes  hungry  in  finite  time  (from 
Dl);  u  hungry  philosopher  starts  enting  in  finite  time  (from  Corollary  6). 
Therefore  every  philosopher  that  remains  thirsty  must  be  eating  in  finite  time. 

The  theorem  follows  from  Corollary  0. 

Efficiency  of  the  Algorithm 

Fo.  the  analysis  of  the  algorithm,  we  assume  that  the  packages  a  philosopher  sends 
to  a  neighbor  are  received  in  the  order  sent.  We  show  that  a  bottle  can  travel  at  most 
twice  between  two  neighboring  philosophers  v-  and  Vj  before  one  of  them  drinks. 
Consider  the  two  cases  corresponding  to  whether  the  fork  for  (Vj.Vj)  is  dirty  or  clean. 

Cm*  1  One  of  the  philosophers,  say  v.,  holds  the  dirty  fork  for  the  edge 

{Vj.Vj}:  if  V|  mails  the  bottle  to  Vj  (in  response  to  a  request),  he  must 
also  mail  the  fork.  Therefore  on  receipt  of  the  bottle,  Vj  will  have  a 
clean  fork  and  hence  will  not  mail  the  bottle  again  until  he  drinks. 
Therefore  the  bottle  travels  at  most  once  from  Vj  to  Vj  before  Vj  drinks. 

Case  S  v.  holds  a  clean  fork  or  a  clean  fork  has  been  mailed  to  v{:  the  bottle 

may  travel  at  most  once  from  Vj  to  v{  and  will  not  travel  from  v.  to  Vj, 
until  Vj  drinks. 

Lemma  8i  There  are  at  most  4d  message  transmissions  for  d  drinking 
sessions  among  all  philosophers. 

Proof!  There  is  at  most  one  request  (for  fork  and/or  bottle),  one 
transmission  of  a  fork  and  two  transmissions  of  a  bottle  between  neighbors 
before  one  of  them  drinks. 
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